◆Cough Once, Get a Fitness-to-Practise Letter◆Vancomycin gets un-cancelled◆Hull's data crunch finds the COPD nobody had diagnosed◆Patients Are Asking ChatGPT Because You Were Fully Booked Until March◆Cough Once, Get a Fitness-to-Practise Letter◆Vancomycin gets un-cancelled◆Hull's data crunch finds the COPD nobody had diagnosed◆Patients Are Asking ChatGPT Because You Were Fully Booked Until March
The Handover
Subscribe
The Handover

Privacy

This notice explains what personal data The Handover collects through thehandover.co, what we use it for, and the choices you have.

Last updated: 28 June 2026

Who we are

The Handover is a UK medical editorial brand and newsletter. For the purposes of the personal data collected through this site and its signup flow, The Handover acts as the data controller.

This notice covers the main website, newsletter signup, the short post-signup onboarding flow, and any information you send directly to hello@thehandover.co.

What we collect

Depending on how you use the site, we may collect:

  • Contact data, mainly your email address when you subscribe.
  • Onboarding profile data, such as your country or region, persona, and stage or role if you complete the post-signup questions.
  • Attribution data, such as UTM parameters, referral codes, referring page, and landing page path, but only where optional analytics cookies are enabled.
  • Technical and security data, such as standard server logs and cookie preference signals needed to operate the site.
  • Correspondence data if you email us directly.

We do not ask for special category health data in the website signup journey, and we do not sell personal data.

How we use it

We use personal data to:

  • send The Handover newsletter and manage your subscription;
  • personalise the short onboarding flow you see after signup;
  • understand which campaigns or referrals led to a subscription;
  • operate, secure, debug, and improve the website;
  • respond to enquiries, corrections, or partnership requests; and
  • keep basic records for compliance, suppression, and abuse prevention.

Every marketing email should include an unsubscribe route. If you opt out, we may keep a minimal suppression record so we do not add you back accidentally.

We rely on different legal bases depending on the activity:

  • Consent for newsletter signup and for optional analytics or marketing cookies.
  • Legitimate interests to run the site, prevent misuse, maintain records, and respond to messages sent to us.
  • Legal obligation where we need to keep records or disclose information to comply with law.

Where we rely on consent, you can withdraw it at any time. For cookies, you can do that on the cookie page.

Who we share data with

We only share data where it is needed to operate the product or meet a legal obligation. That can include:

  • Beehiiv, which handles newsletter subscriptions and subscriber profile fields.
  • Sanity, which powers content management for the site.
  • Hosting and infrastructure providers used to serve and secure the site.
  • Analytics or advertising providers only if you allow those optional cookies.
  • professional advisers, regulators, or law enforcement where required.

International transfers

Some of our service providers may process data outside the UK. When that happens, we expect the provider to use an approved transfer mechanism, such as adequacy regulations or contractual safeguards, before personal data is transferred.

How long we keep data

  • Newsletter subscription data is kept while your subscription is active and for a limited period afterward where needed for suppression, compliance, or dispute handling.
  • Onboarding profile data stays with the related subscriber record unless it is no longer needed or you ask us to erase it, subject to legal exceptions.
  • Cookie preference data is stored on your device for up to six months unless you clear it earlier.
  • Signup onboarding session cookies are set for up to seven days.
  • Attribution data stored in your browser remains until it is replaced, cleared, or consent is withdrawn.

Your rights

Under UK data protection law, you can ask to access, correct, erase, restrict, or object to certain processing of your personal data. You can also ask for portability where that right applies, and you can withdraw consent for optional processing at any time.

To make a rights request, email hello@thehandover.co. You also have the right to complain to the Information Commissioner's Office if you think your data has been handled unfairly.

Cookies and similar technologies

We use a small number of essential cookies for signup and consent management. Optional analytics and marketing technologies are off by default and only switch on if you choose them.

More detail, including the specific storage used by the current build, is on our cookie page.

Contact

For privacy questions or rights requests, email hello@thehandover.co.